Winpatrol displaying .ini files

Hello all,

I have been the victim of pretty frequent browser hijacker attacks. I run Malwarebytes and SuperAntiSpyware which usually gets rid of the viruses. I also use Winpatrol to monitor activity.

After each attack I notice a couple new .ini files in my "hidden files" section. None of my antivirus programs detect them. But they are there.

Here are just a few:

ORQWAJLM.INI2
PPRADMOQ.INI
XBCLNNNN.INI

They are all located in C:\WINDOWS\SYSTEM32\

Should I get rid of them? What are they?

 

Have you tried on-demand scanners from bigger companies? Or online scans? What browser you use and is it an updated version?

Dr.Web CureIt: http://freedrweb.com
Kaspersky AVP-tool: http://ftp.kaspersky.com/devbuilds/AVPTool/
Kaspersky online-scan: http://www.kaspersky.com/virusscanner
Bitdefender online-scan: http://www.bitdefender.com/scan8/ie.html

.. for example

 

Which AV programs do you use? Try Avira which features a very high detection rate (the highest according to AV Comparatives for on-demand scans) and see what it tells you. You can verify that with other web-based free scans like Dr. Web Cure-it, etc.

 

oh yeahhhh!!


also, ive never heard of those files before, are they giving you trouble?... or is it just curiosity?

 

well judging by their name they dont look like files that are legit, but appearances culd be deceiving. well if they are really that important, Windows should automatically re-create them like it does with a lot of it's system critical files if you do choose to delete them.